Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/ZATfzVZh2cBBtcl3NbiCGOyCnY0.roa
File: ZATfzVZh2cBBtcl3NbiCGOyCnY0.roa (raw, json)
Hash identifier: XnXFzMZI5xcTawUA6L5CNSIMSv12trVmAjplLGheOMk=
Subject key identifier: 64:04:DF:CD:56:61:D9:C0:41:B5:C9:77:35:B8:82:18:EC:82:9D:8D
Certificate issuer: /CN=84f824d32df1a5113d82101345d785a38addbde5
Certificate serial: 018CC2DAB91A3E60CBDB19587D9DC4FEA625
Authority key identifier: 84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/ZATfzVZh2cBBtcl3NbiCGOyCnY0.roa
Signing time: Mon 01 Jan 2024 02:29:23 +0000
ROA not before: Mon 01 Jan 2024 02:29:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51490
IP address blocks: 2a05:7b85::/32 maxlen: 32
2a05:7b87::/32 maxlen: 32
2a05:7b81::/32 maxlen: 32
2a05:76c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 May 2024 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:b9:1a:3e:60:cb:db:19:58:7d:9d:c4:fe:a6:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84f824d32df1a5113d82101345d785a38addbde5
Validity
Not Before: Jan 1 02:29:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6404dfcd5661d9c041b5c97735b88218ec829d8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:1e:dc:1f:1f:23:7c:58:27:f4:86:f9:50:74:
92:e7:48:f4:2e:2b:e5:fc:45:c5:98:e0:47:32:1a:
fd:11:0e:6b:4a:d5:80:eb:d3:f2:a1:87:ae:9d:75:
a5:98:ce:be:e7:66:43:83:04:43:7d:8e:a9:22:16:
45:66:d5:5e:c3:f7:2c:ce:0e:fd:95:c1:45:28:1f:
2f:95:ab:60:31:54:99:15:ff:6f:5b:e2:93:27:ee:
71:b7:7b:b7:64:2f:fe:88:e8:f0:bd:bb:b1:4c:61:
59:2a:9c:1b:42:e7:8b:4e:c1:67:09:54:8a:10:f3:
a6:f5:1e:33:23:3c:7e:e6:f3:9f:51:86:38:9a:9c:
7f:50:bd:17:e8:5a:83:ad:26:70:f9:ab:6c:e3:54:
25:63:9e:da:fb:ef:a2:1c:ab:87:51:70:8f:5c:01:
44:6f:17:e4:3e:b1:18:d9:23:bc:d0:c9:e9:eb:6d:
7e:85:57:8a:2e:98:49:50:07:9d:37:1e:38:e7:55:
43:38:39:27:39:3b:6a:47:da:9b:4c:ae:cb:47:b7:
9d:cf:2e:8d:36:d8:a1:e2:28:99:d7:f7:45:b7:c9:
c9:93:2b:27:47:26:0f:dd:f0:f3:9b:63:6d:f4:3b:
e4:67:15:b2:9a:4a:f9:37:de:ca:b4:8f:03:9f:58:
8f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:04:DF:CD:56:61:D9:C0:41:B5:C9:77:35:B8:82:18:EC:82:9D:8D
X509v3 Authority Key Identifier:
keyid:84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/ZATfzVZh2cBBtcl3NbiCGOyCnY0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:76c0::/29
2a05:7b81::/32
2a05:7b85::/32
2a05:7b87::/32
Signature Algorithm: sha256WithRSAEncryption
51:c6:f5:f3:f5:f9:8c:20:be:32:db:a9:15:3b:14:af:28:a5:
dd:4e:28:26:51:4f:88:6e:b6:a7:71:95:b7:76:b7:d1:d6:f3:
a5:65:30:51:56:d2:3f:00:8d:35:cd:47:4a:43:4a:b9:dc:cd:
ed:e1:ae:50:16:ce:78:7f:54:93:43:cd:ff:b2:d8:cf:43:2a:
bb:26:a7:e2:16:e0:ee:ba:c1:e1:99:26:6a:69:2b:06:f0:d1:
59:28:da:01:9d:c7:77:3f:38:0a:6e:05:fc:62:80:93:61:0e:
1c:2e:3d:c1:6e:d2:07:b4:3f:eb:56:7d:f8:84:d8:8d:98:3d:
f2:a5:67:5a:21:58:ac:9c:40:39:f9:26:b3:6b:79:b4:19:c7:
7b:ec:7e:7b:fa:e8:85:87:72:34:c0:c7:f3:2d:48:81:52:83:
8c:a5:13:01:84:8d:d7:0d:bd:c6:13:16:5e:13:18:23:7c:51:
d3:16:b2:7a:f6:f1:b0:91:d1:eb:59:0c:f9:7c:24:0c:16:5e:
d9:82:bd:e7:20:7e:c7:30:74:f0:94:f6:4e:17:71:51:4c:2a:
1b:15:65:4b:56:19:c4:f7:b1:7f:73:2d:36:f5:db:f7:53:c3:
dc:78:3e:04:88:db:20:5d:20:ff:4f:03:f9:be:ca:8d:38:0a:
74:3f:48:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 12:31:33 2024 by rpki-client on console-ams.rpki-client.org